A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are believed to be vulnerable.
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Name | Vendor | Start Version | End Version |
---|---|---|---|
Spice-gtk | Spice-gtk_project | * | 0.34 (including) |
Spice | Ubuntu | artful | * |
Spice | Ubuntu | bionic | * |
Spice | Ubuntu | cosmic | * |
Spice | Ubuntu | devel | * |
Spice | Ubuntu | disco | * |
Spice | Ubuntu | eoan | * |
Spice | Ubuntu | esm-infra-legacy/trusty | * |
Spice | Ubuntu | esm-infra/bionic | * |
Spice | Ubuntu | esm-infra/focal | * |
Spice | Ubuntu | focal | * |
Spice | Ubuntu | groovy | * |
Spice | Ubuntu | hirsute | * |
Spice | Ubuntu | impish | * |
Spice | Ubuntu | jammy | * |
Spice | Ubuntu | kinetic | * |
Spice | Ubuntu | lunar | * |
Spice | Ubuntu | mantic | * |
Spice | Ubuntu | noble | * |
Spice | Ubuntu | oracular | * |
Spice | Ubuntu | plucky | * |
Spice | Ubuntu | trusty | * |
Spice | Ubuntu | trusty/esm | * |
Spice-gtk | Ubuntu | artful | * |
Spice-gtk | Ubuntu | bionic | * |
Spice-gtk | Ubuntu | esm-apps/bionic | * |
Spice-gtk | Ubuntu | trusty | * |
Spice-gtk | Ubuntu | upstream | * |
Spice-protocol | Ubuntu | esm-infra/xenial | * |
Spice-protocol | Ubuntu | xenial | * |